资深顾问 – Azure, IAM 与终端解决方案
Principal Consultant – Azure, IAM & Endpoint Solutions
关于CrucialLogics Inc.
我们使用您已拥有的原生微软技术来保护您的业务。
我们在安全理念中采用“有良知的咨询”方法。
- 安全应该简单、易于管理且可扩展
- 安全不需要在各种点解决方案上进行大量投资
- 通过正确配置您已经付费的技术，可以轻松实现安全
- 通过减少整体基础设施来降低攻击面
你永远无法阻止恶意行为者针对你。安全的目标是建立防御措施，在入侵发生前检测到攻击尝试。
高级顾问 - Azure、IAM 和终端解决方案
远程，全球地点均可（需北美工作时间）
职位简介：
高级顾问将领导微软安全和终端管理解决方案的架构、部署和优化，深入专长于Microsoft Active Directory 本地/Entra ID、Microsoft Defender XDR、Microsoft Intune 和 Azure 基础设施。该职位结合了高级技术专长、咨询领导力和售前参与，为客户提供安全、可扩展且现代的安全运营。
主要职责：
售前与客户参与
· 通过客户架构研讨会、解决方案演示、范围会议和方案开发支持售前工作。
· 将业务需求转化为推动可衡量成果的现代安全架构。
· 与项目经理合作，监督项目交付的技术质量，并在解决方案构建和实施过程中积极支持高级和助理顾问。
安全架构与解决方案设计
· 架构端到端安全解决方案，利用 Microsoft IAM、Azure、Microsoft Defender 和 Microsoft Intune 来满足企业安全和合规要求。
· 从设计到实施领导复杂的安全转型项目，确保高质量成果和顺畅的运营准备。
Microsoft IAM（Active Directory/Entra ID）
· 在 Entra ID、条件访问、多因素认证和身份治理中设计以身份为中心的安全控制。
· 将终端合规性、风险检测和实时信号与条件访问策略对齐。
Microsoft Defender XDR
· 实施并调优 Microsoft Defender for Endpoint、Identity、Cloud Apps 和 Office 365。
· 配置 EDR、威胁分析、攻击面缩减、高级狩猎和自动化
查看英文原文
About CrucialLogics Inc.
We secure your business using native Microsoft technologies you already own.
We apply our Consulting with a ConscienceTM approach in our security philosophy.
- Security should be simple, easy to manage and scalable
- Security does not require a large investment in various point solutions
- Security is easily achieved by properly configuring technologies you already are paying for
- Reduce your attack footprint by reducing overall infrastructure
You will never stop bad actors from targeting you. The goal in security is to put defences in place to detect the attempt before the breach.
Principal Consultant- Azure, IAM & Endpoint Solutions
Remote, Global locations welcome (North American business hours required)
Job Summary:
The Principal Consultant will lead the architecture, deployment, and optimization of Microsoft security and endpoint management solutions, with deep specialization inMicrosoftActive Directoryon-premise/Entra ID,Microsoft Defender XDR,Microsoft Intune,andAzure Infrastructure. This role blends advanced technicalexpertise, advisory leadership, and presales engagement to deliver secure, scalable, and modern security operations for enterprise clients.
Key Responsibilities:
Presales & Client Engagement
· Support presales through clientarchitectureworkshops, solution demonstrations, scoping sessions, and proposal development.
· Translate business requirements into modern security architectures that drive measurable outcomes.
· Overseethetechnicalquality of project delivery in collaboration with the Project Manager and actively supportSenior and Associate Consultantsthroughoutthe solutionBuildandimplementation.
Security Architecture & Solution Design
· Architect end-to-end security solutionsleveragingMicrosoftIAM,Azure,Microsoft Defender, andMicrosoftIntuneto meet enterprise security and compliance requirements.
· Lead complex security transformation projects from design through implementation, ensuringhigh qualityoutcomes and smooth operational readiness.
Microsoft IAM (Active Directory/Entra ID)
· Design identity-centric security controls across Entra ID, Conditional Access, MFA, and identity governance.
· Align endpoint compliance, risk detections, andreal-timesignals with Conditional Access policies.
Microsoft Defender XDR
· Implement and tune Microsoft Defender for Endpoint, Identity, Cloud Apps, and Office 365.
· Configure EDR, threat analytics, attack surface reduction, advanced hunting, and automated remediation.
· Provideexpert guidance on XDR strategy, identity protection, cloud app governance, andcross-domaincorrelation in Defender.
Microsoft Intune (Endpoint Security & Management)
· Deploy, configure, and manage Intune for MDM/MAM across Windows, macOS, iOS, and Android.
· Build compliance policies, device configuration profiles, app protection policies, and conditional access integrations.
· Lead modernization initiatives including Autopilot,zero touchprovisioning, andcloud baseddevice governance.
Azure Infrastructure
· Deploy and configure MicrosoftAzureinfrastruture, includingSentinel(SIEM, SOC)workspaces, data connectors, analytics rules, automation playbooks, and incident response workflows.
Identity, Access & Conditional Access
Leadership & Mentorship
· Mentor consultants and analysts across SOC, identity, and endpoint management domains.
· Provide training sessions to clients or internal teams on Sentinel, Defender, and Intune best practices.
· Collaborate closely with current Security Service managers to refine SOC processes, ensuring alignment with organizationalobjectivesand evolving threat landscapes.
· Facilitate the identification and implementation of process improvements to enhance detection, response, and reporting capabilities.
Operational Excellence
· Troubleshoot Sentinel ingestion issues, Defender signal quality gaps, and Intune device management challenges.
· Deliver clear design documentation, runbooks, and operational handover materials.
· Assistwith lab environments, testing, and lifecycle management of security configurations.
Required Qualifications:
· 10+ years of experiencein IT security, SOC operations, endpoint management, or cloud security architecture.
· Deephands-onexpertisewithMicrosoftIAM, Azure,Sentinel, Microsoft Defender XDR, and Microsoft Intune.
· Strongunderstandinginfrasturemanagement andendpoint security, and identity-driven security models.
· Provenability to architect and lead large-scale security implementations.
· Excellentpresales, communication, and client-facing skills.
Preferred Certifications
· AZ-500: Azure Security Engineer
· MD-102 / MD-101: Endpoint Administrator
· SC-200: Microsoft Security Operations Analyst
· SC-300: Identity and Access Administrator
· SC-400: Information Protection Administrator
Preferred Skills:
· Experience with MITRE ATT&CK mapping, threat modeling, and detection engineering.
· Familiarity with Microsoft Purview for compliance and DLP (nice-to-have).
· Experience supporting SOC teams and global enterprise security operations.
· Ability to lead multi-region rollouts and complex modernization projects.
· KQL programming
· ARM Templates
· Bicep
Work Conditions:
·
This jobrequiresworkingNorth Americanbusiness hours withcustomers and colleagues.We’reaproject driven company, andweneed to followthe workinghours ofourCustomers(EST)
· Overtime may berequiredto meet project deadlines.
· Participation in client workshops, presentations, and training sessions is expected.
· Occasional travel may berequiredto meet clients or internal stakeholders.
Originally posted on Himalayas